claude-nomad 0.22.1 → 0.22.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/.gitleaks.toml +14 -9
  2. package/CHANGELOG.md +14 -0
  3. package/package.json +1 -1
package/.gitleaks.toml CHANGED
@@ -15,19 +15,24 @@ regexes = [
15
15
  '''key=[a-f0-9]{8,} [\w./-]+\.\w+:\d+''',
16
16
  ]
17
17
 
18
- # Path-scoped: the documented test-fixture github-pat literal accumulates
18
+ # Path-scoped: the documented test-fixture github-pat literal AND the three
19
+ # entropy-variant placeholders (zero-suffix, alphabet, repeat-A) accumulate
19
20
  # in Claude Code session transcripts whenever a conversation touches the
20
- # Pitfall 4 docs or this allowlist itself. Live sessions cannot be
21
- # safely sed-scrubbed (sed -i renames out from under the running CLI's
22
- # open file descriptor and silently drops post-rename writes), so the
23
- # only sustainable false-positive handler is a narrow allowlist scoped
24
- # to synced session paths. `condition = "AND"` requires BOTH the literal
25
- # AND a `shared/projects/<logical>/.../*.jsonl` path; a real PAT in the
26
- # same file (different 36-char body) still fires.
21
+ # Pitfall 4 docs, this allowlist itself, or a session-scrub discussion that
22
+ # names one of the variants. Live sessions cannot be safely sed-scrubbed
23
+ # (sed -i renames out from under the running CLI's open file descriptor
24
+ # and silently drops post-rename writes), so the only sustainable
25
+ # false-positive handler is a narrow allowlist scoped to synced session
26
+ # paths. `condition = "AND"` requires BOTH a known literal AND a
27
+ # `shared/projects/<logical>/.../*.jsonl` path; a real PAT in the same
28
+ # file (different 36-char body) still fires.
27
29
  [[allowlists]]
28
- description = "claude-nomad: documented test-fixture github-pat literal in synced session transcripts"
30
+ description = "claude-nomad: documented test-fixture github-pat literals + scrub placeholders in synced session transcripts"
29
31
  regexes = [
30
32
  '''ghp_xJZbT3qfV2nLpKR8mYwH4dGtCsW9aE1uF6oA''',
33
+ '''ghp_xJZbT3qfV2nLpKR8mYwH4dGtCs0000000000''',
34
+ '''ghp_ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789''',
35
+ '''ghp_AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA''',
31
36
  ]
32
37
  paths = [
33
38
  '''^shared/projects/[^/]+/.*\.jsonl$''',
package/CHANGELOG.md CHANGED
@@ -1,5 +1,19 @@
1
1
  # Changelog
2
2
 
3
+ ## [0.22.3](https://github.com/funkadelic/claude-nomad/compare/v0.22.2...v0.22.3) (2026-05-23)
4
+
5
+
6
+ ### Changed
7
+
8
+ * **deps:** resync package-lock with manifest after 0.22.2 ([#109](https://github.com/funkadelic/claude-nomad/issues/109)) ([7317fd4](https://github.com/funkadelic/claude-nomad/commit/7317fd4bb375c5a5fb9c05c327fc75423946b0f0))
9
+
10
+ ## [0.22.2](https://github.com/funkadelic/claude-nomad/compare/v0.22.1...v0.22.2) (2026-05-23)
11
+
12
+
13
+ ### Fixed
14
+
15
+ * **gitleaks:** allowlist entropy-variant placeholders alongside the canonical PAT literal ([#107](https://github.com/funkadelic/claude-nomad/issues/107)) ([cb3bd59](https://github.com/funkadelic/claude-nomad/commit/cb3bd5923669aaf758d37afb5ed8f82261472d3a))
16
+
3
17
  ## [0.22.1](https://github.com/funkadelic/claude-nomad/compare/v0.22.0...v0.22.1) (2026-05-23)
4
18
 
5
19
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "claude-nomad",
3
- "version": "0.22.1",
3
+ "version": "0.22.3",
4
4
  "type": "module",
5
5
  "description": "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
6
6
  "keywords": [